CVE-2024-48450: Hcengineering Huly

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group.

Affected products

• Hcengineering Huly: version 0.6.295 only

Published 2024-10-25. Last modified 2026-06-17.